PCSFE V1

Why are VM-Series firewall s and hardware firewall s that are external to the Kubernetes cluster problematic for protecting containerized workloads?A . They are located outside the cluster and have no visibility into application-level cluster traffic.B . They do not scale independently of the Kubernetes cluster.C . They are managed...

When implementing active-active high availability (HA), which feature must be configured to allow the HA pair to share a single IP address that may be used as the network's gateway IP address?A . ARP load sharingB . Floating IP addressC . HSRPD . VRRPView AnswerAnswer: B

What is a benefit of network runtime security?A . It more narrowly focuses on one security area and requires careful customization, integration, and maintenance.B . It removes vulnerabilities that have been baked into containers.C . It is siloed to enhance workload security.D . It identifies unknown vulnerabilities that cannot be...

What Palo Alto Networks software firewall protects Amazon Web Services (AWS) deployments with network security delivered as a managed cloud service?A . VM-SeriesB . Cloud next-generation firewall (NGFW)C . CN-SeriesD . Ion-Series Ion-SeriesView AnswerAnswer: B

Which solution is best for securing an EKS environment?A . VM-Series single hostB . CN-Series high availability (HA) pairC . PA-Series using load sharingD . API orchestrationView AnswerAnswer: B